Medium
CVE-2021-3783
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-3785
Cross-site Scripting in yourls
Medium
CVE-2021-3780
Cross-site Scripting in peertube
High
CVE-2021-3795
semver-regex Regular Expression Denial of Service (ReDOS)
High
CVE-2021-3794
Inefficient Regular Expression Complexity in vuelidate
Medium
CVE-2021-22147
Exposure of sensitive information in Elasticsearch
High
CVE-2021-3777
tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion
High
CVE-2021-39239
XML External Entity Reference in Apache Jena
High
CVE-2021-3807
Inefficient Regular Expression Complexity in chalk/ansi-regex
High
CVE-2021-3810
Inefficient Regular Expression Complexity in code-server
Critical
CVE-2021-41303
Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass
High
CVE-2021-23442
Prototype Pollution in cookiex/deep
High
CVE-2021-3804
Inefficient Regular Expression Complexity in taro
Medium
CVE-2021-39189
Observable Response Discrepancy in Lost Password Service
Medium
CVE-2021-39208
Partial path traversal in sharpcompress
Medium
CVE-2021-39227
Prototype Pollution in the merge and clone helper methods
Medium
ghsa-wfrj-qqc2-83cm
Remote command injection when using sendmail email transport
High
ghsa-84p7-fh9c-6g8h
Prototype Pollution in mixme
High
CVE-2021-32838
Regular Expression Denial of Service in flask-restx
Medium
CVE-2021-39325
OptinMonster <= 2.6.0 - Reflected Cross-Site Scripting
High
CVE-2021-32839
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
High
CVE-2021-24754
MainWP Child Reports <= 2.0.7 - Admin+ SQL Injection
Medium
CVE-2021-24412
Html5 Audio Player <= 2.1.2 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24622
Customer Service Software & Support Ticket System < 5.10.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.